All pull requests

Pull requests

• Fix bound audit code snippets

  #1003·Vertextheonesolution opened Oct 13, 2026·3 tasks·

  ·
  1

• Avoid infinite traversal of recursive YAML aliases

  #1002·GreedyC opened Sep 24, 2026·1 of 3 tasks·

  ·
  1

• fix: allow bare filenames in --filter custom filter paths

  #1001·anushamukka9 opened Sep 21, 2026·

  ·
  1

• Add pnpm-lock.yaml to is_lock_file

  #1000·MRX-72 opened Sep 16, 2026·

  ·
  1

  1

• List py.typed explicitly in MANIFEST.in

  #999·MRX-72 opened Sep 16, 2026·

  ·
  1

  1

• Detect secrets assigned with the Python walrus operator

  #998·MRX-72 opened Sep 16, 2026·

  ·
  1

• Detect secrets in type-annotated assignments (Fixes #780)

  #997·MRX-72 opened Sep 15, 2026·

  ·
  1

  1

• Add pnpm-lock.yaml to is_lock_file filter

  #994·Kushagra963-lab opened Aug 28, 2026·

  ·
  1

• Bugfix/hex high entropy string

  #993·GillSami opened Aug 19, 2026·3 tasks·

  ·

• Require quotes for Go keyword assignments

  #992·HaikalE opened Aug 16, 2026·1 of 3 tasks·

  ·
  1

• fix: scan tracked files correctly when run from a subdirectory

  #991·citizen204 opened Aug 15, 2026·

  ·
  1

• Chore/scan gate optimizations

  #990·GillSami opened Aug 13, 2026·3 tasks·

  ·

• fix: log a diagnostic when scan_line() has no plugins configured

  #989·citizen204 opened Aug 12, 2026·

  ·
  1

• Chore/detect secrets perf optimizations

  #988·GillSami opened Aug 11, 2026·3 tasks·

  ·

• fix: don't crash in wordlist filter when word list has no usable words

  #985·citizen204 opened Jul 26, 2026·

  ·
  1

• fix: gracefully handle out-of-range YAML timestamps during scan

  #984·citizen204 opened Jul 25, 2026·

  ·
  1

• fix: handle empty files in scan_for_allowlisted_secrets_in_file

  #983·citizen204 opened Jul 25, 2026·

  ·
  1

• fix: recognize pnpm-lock.yaml as a lock file

  #982·citizen204 opened Jul 25, 2026·

  ·
  1

• fix(yaml): scan string values inside YAML sequences

  #981·citizen204 opened Jul 24, 2026·

  ·
  1

• Detect GitHub fine-grained personal access tokens (github_pat_)

  #980·rayair250-droid opened Jul 24, 2026·

  ·

• fix: conflated f-string/str.format in filtered-secret debug log

  #979·citizen204 opened Jul 23, 2026·

  ·
  1

• fix(aws): do not treat proxy 403 as invalid AWS credentials

  #978·alexchen-sys opened Jul 22, 2026·1 of 3 tasks·

  ·

• fix: prevent ReDoS in is_indirect_reference heuristic filter

  #977·citizen204 opened Jul 21, 2026·

  ·
  1

• Add DatadogDetector plugin for API and Application keys

  #975·lcmangalagiri opened Jul 17, 2026·

  ·
  2

• Include py.typed in source distribution manifest

  #974·0xTaoZ opened Jul 16, 2026·

  ·
  1